How it works

The short version is on the home page: the kernel stops every program the agent starts, wardend checks it against the rules, and a command that trips one waits for a signature from your phone. Here are the two detailed diagrams.

Architecture

The life of one command

Read on

• Which commands need a signature and how the rules work: CLI reference.
• Who can attack this and what stops them: Threat model.
• Why the model can’t simply turn wardend off: Why the model can’t turn it off.